up vote 15 down vote favorite
4
share [g+] share [fb]

Is it true, i need no antivirus programm for linux?

link|improve this question
feedback

migrated from stackoverflow.com Oct 14 '09 at 20:33

This question came from our site for professional and enthusiast programmers.

13 Answers

up vote 20 down vote accepted

Well, you can never be too safe. Viruses on linux are unlikely, but they do happen occasionally. You can get away with it though, as long as you don't do stupid things (like log into the gui as root, and webbrowse to shady sites).

The exception to the rule is mail servers. If you're running a linux mail server without running an antivirus to check the mail that passes through your server, you're likely propagating viruses to other people, and that's not nice.

link|improve this answer
feedback

Is it true, i need no antivirus programm for linux?

The answer is a sound happy Yes!, followed by a carefully pondered No.

Yes, because the Linux system isn't a traditional target of malware makers, and yes because Linux file security features along with a pro-active non-root usage philosophy guarantee good immunity from most malware. Especially from malware ability to spread to other systems or to attack protected areas of the system.

No, because there is indeed malware that targets and affects Linux systems. In high security requirement environments, a Linux machine may indeed need the added protection of an anti-virus. For most users this isn't an issue. The way software for Linux is distributed gives a strong guarantee of security (source code is available, it's developed by the community, it's peer-reviewed, it's non commercial). So this no is not to be taken literally. But it is an issue for machines on a wide corporate network or with mission-critical tasks. A common example: If you ever get yourself a Virtual Private Server from any of the mainstream web hosting companies, you'll see there the ability to configure your Linux anti-virus.

link|improve this answer
feedback

It's less of a neccessity than on a windows based system, as there are far fewer nasty apps made for linux systems. That's not to say there arn't any, however.

If this is your own personal system, you can probably get away with being unprotected. If it's not your system, or for a company that might be vulnerable to attack from competitors for example, certainly use one.

Also consider if you're on a network, it's possible your linux machine - whilst not vulnerable itself, can help spread viruses to other systems on the network, and won't be caught by the scanners on your other systems.

Here is an interesting article on the subject, pay attention to the last two paragraphs especially.

In short, you probably don't need one if you're a smart user, but better safe than sorry.

link|improve this answer
feedback

Well there is ClamAV for Linux which is an open source program so its not an unheard of concept to have an antivirus, i am currently using ClamAV on CentOS for one of my desktops

link|improve this answer
5  
Although ClamAV primarily detects windows viruses -- it's more aimed at servers running samba/nfs shares, mail servers, etc. – Captain Segfault Oct 14 '09 at 21:04
feedback

There are viruses for linux, and other security threats as well, but from what I have seen the typical approach in defending a system is different.

Running something like tripwire or AIDE seems to be more common on linux systems than Windows boxes. Instead of checking your files for patterns known to be bad, and complaining when bad stuff is detected, you check your files to make sure they are exactly what they should be, and complain when they are not. This approach has advantages and disadvantages.

You can, of course, do either or both on either OS, but from what I've seen the tripwire/AIDE approach is more common on linux than Windows, and AV software is much more common on Windows than linux.

I attribute this to differences in how "typical" applications are written and distributed in each system, the typical threats the systems face, how these systems are typically administered and used, and the resultant consequences for the convenience and effectiveness of each approach. (Of course, it is perfectly possible to write applications for each in the style of the other.)

link|improve this answer
feedback

It is true that you are less-likely to acquire a virus on Linux, considering the fact that it's not in wide-spread desktop use, and is therefore not a great platform to develop malicious applications for. That isn't to say you cannot ever catch something if you're running on Linux.

link|improve this answer
feedback

Anti-virus, no. But you must still be behind a properly set up firewall; no matter what operating system you are running there are always vulnerabilities that someone wants to abuse.

link|improve this answer
feedback

The thing to remember is that anti-virus software often works by scanning for particular code signatures, and that only works for known malware. Make sure any AV software you get is set up to defend Linux from malware. Much of it will stop Windows malware, which is useful, but which won't help you directly.

link|improve this answer
feedback

Linux is much more secure, by design, but a beginner could still make it insecure. However, viruses are not the issue on unix really -- rootkits and privilege escalations are. There ARE tools to detect and prevent these, including firewalls, rootkit scanners, log analysers, intrusion detection systems, etc. Even so, it's still a MUCH more secure alternative than windows, even if you ignore all that.

One thing: choose a good distro that has virtually all of the applications you need already available via its installer (mainly debian and ubuntu). Because you're getting software from a trusted source, and automatically getting security updates regularly, this will make you a LOT safer than downloading random software and installing it over the web, as windows encourages.

link|improve this answer
feedback

I think its idiotic to say no, you don't need it. Closed Source software (such as Windows and office) don't allow easy access to the code so finding vulnerabilities is generally quite difficult, making them more secure. (I state that as an opposing argument to A Dwarf because frankly as flawed as my statement is, so is his. Using that argument (open source is safer because it's open vs. closed source is safer because it's closed is a bit like the argument of which Ice Cream flavor is better, Chocolate or Vanilla. If you believe one, then that's the one you believe and you discount the other because you don't believe it.

The vast majority of systems out there use Windows... so the vast majority of malware will target Windows. But that doesn't mean there aren't bugs for Linux OR for Mac. Or any other platform. And all it takes is one hacker group to say "look, I know most people use windows, but there are SOOO many =insert non-Windows OS here= users who THINK they are safe and have NO protection, I'll just target them.

If you don't use protection, and you play around, you will EVENTUALLY catch something.

link|improve this answer
It's a good point, Multiverse IT. But I don't equate open source with security. I do assume there's a chance for a more secure environment because of peer-review and your ability (if you so wish) to inspect the code. I'm sure you agree. Conversely, I do not immediately assume (neither I even hinted at) commercial software is less secure because of it being closed source. With a few notable exceptions I know of no commercial or closed source software that is malign. Malware has however better odds at moving unnoticed here. And I'm sure you agree with that too. – A Dwarf Oct 15 '09 at 3:39
feedback

Sophos antivirus has a fantastic Linux virus solution. Give them a look.

link|improve this answer
feedback

see this link: http://www.sophos.com/

link|improve this answer
What is this? What does it do? Could you edit and expand your answer? It appears someone already provided a similar link – Simon Sheehan Dec 30 '11 at 17:00
feedback

I am living without antivirus few months, and no virus showed so far. I do on-demand scan occasionaly, so that I know I'm clean.
If you update all your software often, and don't behave foolishly, there is IMHO no need for AV (since there aren't many wide-spread viruses that use 0-day exploits IMHO), nor for Windows neither for Linux.

link|improve this answer
1  
I've run Windows with no antivirus for years, and have never gotten infected, but I'd never admit that doing so is a good idea. At least, not on Windows... for the reasons mentioned in some other answers, I think you can safely get away with it on Linux, but the point is that I don't believe safe software habits are themselves enough to consider yourself protected from viruses. – David Zaslavsky Oct 14 '09 at 21:18
feedback

Your Answer

 
or
required, but never shown